B2b Advanced Communications
Vendor:
First CVE: Oct 6, 2015 · Active for 10 years
7
Total CVEs
More Total CVEs than 85% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 13% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact B2b Advanced Communications over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 6, 2015
10 years ago
Most Recent CVE
Jul 31, 2023
1,092 days ago
CVE Severity & Scoring
B2b Advanced Communications7 CVEs
86%
14%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network5 (71.4%)
Unknown2 (28.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (71.4%)
High0 (0.0%)
Unknown2 (28.6%)
User Interaction
None3 (42.9%)
Unknown2 (28.6%)
Required2 (28.6%)
Privileges Required
Low4 (57.1%)
High0 (0.0%)
None1 (14.3%)
Unknown2 (28.6%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-0341HIGH IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obt | May 15, 2016 | 7.5 | 24 | NO | NO |
CVE-2023-24971MEDIUM
IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted | Jul 31, 2023 | 6.5 | 20 | NO | NO |
CVE-2016-5892MEDIUM Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.5_2, allows re | Oct 5, 2016 | 5.4 | 20 | NO | NO |
CVE-2023-22595MEDIUM IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr | Jul 31, 2023 | 5.4 | 17 | NO | NO |
CVE-2015-7445MEDIUM IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users t | Jan 1, 2016 | 4.3 | 17 | NO | NO |
CVE-2015-5022MEDIUM IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2, when access by guests is enabled, place an intern | Oct 6, 2015 | 4.3 | 14 | NO | NO |
CVE-2015-4973MEDIUM Cross-site scripting (XSS) vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.3_2 allows | Oct 6, 2015 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For B2b Advanced Communications
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.0.0.3 | 4 | 5.1 | 1.1% | 0 | 0 |
| 1.0.0.2 | 4 | 5.1 | 1.1% | 0 | 0 |
| 1.0.0.1 | 4 | 5.1 | 1.1% | 0 | 0 |
| 1.0 | 2 | 5.9 | 1.2% | 0 | 0 |